I tried to query my database (Login) using Postman on localhost using this query

{
    "email": { "$gt": ""},
    "password": "pass1234"
}

and I was logged in

How can I use any mongodb data sanitizer to restrict this kind of query being executed by malicious code sent to my application. NB: I am using the Nextjs inbuilt server